CVE-2025-38095 dma-buf: insert memory barrier before updating num_fences